Privacy policy Ursula Klein · Food & Body

The responsible data processing unit on this website is:

Ursula Klein · Food & Body
50767 Cologne
Phone: (+49) 1637767016

Data Protection

The protection of your personal data (hereinafter referred to as "data") is very important to us.The following statements give you an overview of the type, scope, purpose and duration of the processing of your data by us.

Scope?

The information contained in this statement applies to all our online offers referencing this statement.These may be: our websites, our presence on online portals of third parties (eg social media appearances), services offered by us online, features and content, including internet-enabled applications (hereinafter referred to as "apps") as well as others, via our online presence and apps arranged or mediated data processing (hereinafter collectively: "online offer").

Why do we process data?

As a rule, processing of data only takes place insofar as this is necessary for the functional provision of our online offer as well as for our contents and services or if required by contractual or statutory regulations.

In addition, we process the data to the extent described

To provide you with a personalized user experience on our online offer,
communicate with you through our offers and services when you initiate such communication,
initiate contracts and fulfill closed contracts upon your request,

May we process the data?

If such processing is not permitted by law (for example, for the purpose of fulfilling the contract or due to legitimate interests), this shall only take place on the basis of your express and always revocable consent with effect for the future.

Which rights do you have?

We also inform you about your rights in connection with data processing. For example, Your right to information and how you can revoke your consent and object to processing without your consent.

What do the technical terms mean?

The terms used in this privacy policy, such as "personal information", "processing", "processing restriction", "profiling", "processor" or "controller", are as defined in Article 4 of the General Data Protection Regulation (hereinafter DSGVO). ,

I. General information about data processing

1. Responsible
2. Categories of affected persons
3. Sources and types of data
4. Legal basis for the processing of your data
a. Your consent (Article 6 (1)(a) GDPR)
b. The fulfillment of (pre-) contractual obligations (Article 6 (1) (b) GDPR)
c. The fulfillment of a legal obligation (Article 6 (1) (c) GDPR)
d. The preservation of vital interests (Article 6 (1) (d) GDPR)
e. A primary interest (Article 6 (1) (f) GDPR)
5. Children / Age Verification
6. Storage duration and data deletion
7. Obligation to specify the data
8. Categories of recipients of your data
9. Transfer of data to a third country or to an international organization
10. External links

II. The data processing in detail

1. Provision of the online offer and creation of logfiles
2. Use of cookies
3. Contact form and e-mail contact
4. Google Web Fonts
5. Google Maps

III. Your rights

1. Right to information
2. Right to rectification
3. Right to delete the data or restrict the processing
4. Right to information
5. Right to Data Portability
7. Right to revoke the data protection consent declaration
8. Automated decision on a case-by-case basis including profiling
9. Right to complain to a supervisory authority

IV. Your right to object

____________________________________________________________________________

I. General information about data processing

1. Responsible

Publisher of this Privacy Policy and Data Controller in connection with our online offering is:

See above.

2. Categories of affected persons

This Privacy Policy provides a complete overview of the nature, purpose and scope of any data processing related to our online offering. Which of these data processing is actually done depends e.g. Afterwards, whether you only visit our online offer or use the functions and services offered there. As a result, you may be affected by the data processing described here as a visitor or user of our online offer (hereinafter collectively: "User").

As far as our online offer allows other users to publish content that contains data about you, or to transmit such content to us or third parties, you may also be affected by the data processing. The same applies in cases where our online offer is linked to external data sources about you or if data from you (eg other physicians or psychotherapists, statutory health insurance associations, health insurances, the medical service of the health insurances, medical associations and private medical billing offices) are sent to us. Thus, you may be affected by the data processing described here even if you were neither visitor nor user of our online offer (hereinafter: "other affected parties"). Insofar as this is required by law, we will inform other data subjects about the data processing, stating the origin of the data separately.

3. Sources and types of data

We process data that we have received from you as part of your visit or use of our online offer (for example, at your request, to initiate or conduct business relationships).In addition, in connection with the provision of our services, we process data from you that we legitimately obtain from or collect from other users, affiliated companies, other third parties or from publicly available sources (eg debtor directories, trade and association registers, land registers, press releases, Internet) to defend against and investigate attacks on our IT systems, abuse and fraud, tailoring our online offering, executing treatment orders and performing contracts, including delivery and payment processing, or on the basis of your consent). Insofar as this is required by law, we will inform other data subjects about the data processing, stating the origin of the data separately.

Such data can be:

Inventory data (for example name, address, account data, date of birth, user ID, password)
contact information (e.g., e-mail, phone number)Content data (e.g., texts, pictures, videos)
Usage data (for example, date, time and extent of your access to our website)
metadata (e.g., the website from which you come to our online offering, IP address, location data, device information)

4. Legal basis for the processing of your data

We process the data if possible and primarily on the basis of legal permission, without prejudice to any additional consent on your part.

If the intended processing can not be done on the basis of a legal permission, we will get your explicit consent.

The legal basis for the processing of the aforementioned data is in accordance with the provisions of the GDPR and the Federal Data Protection Act (BDSG):

a. Your consent (Article 6 (1) (a) GDPR)
If you have given us consent to the processing of data for specific purposes (such as the sending of a newsletter), your consent is the legal basis for the processing. Further details on the purpose and scope of the data processing can be found in the detailed explanations in this privacy policy as well as in the additional information provided upon obtaining your consent.

You can revoke your consent at any time. The revocation of consent does not affect the validity of the process. For more information see III. this explanation.

b. The fulfillment of (pre-) contractual obligations (Article 6 (1) (b) GDPR)
If the processing is necessary for the performance of a contract of which you are a party or for the purpose of performing any pre-contractual action that is required upon your request, the lawfulness of the processing shall be based thereon.

Further details on the purpose and scope of the data processing can be found in the detailed explanations in this privacy policy as well as in the contract documents and terms and conditions presented at the time of the initiation and conclusion of the contract.

c. The fulfillment of a legal obligation (Article 6 (1) (c) GDPR)
We are subject to various legal obligations that require the collection and processing of data or have an impact on the extent and duration of data storage (for example, tax regulations, money laundering legislation).

d. The preservation of vital interests (Article 6 (1) (d) GDPR)
If the processing of the data is necessary to protect vital interests on your part or any other natural person, it is permissible. This is only possible in exceptional cases in connection with our online offer (for example, if you were in a life-threatening situation and our service is used to provide you with medical help in this respect).

e. A primary interest (Article 6 (1) (f) GDPR)
If necessary, we also process your data to safeguard our legitimate interests or the legitimate interests of a third party. This shall only apply if your interests or fundamental rights and fundamental freedoms, which require the protection of personal data, do not prevail.

Such a predominant interest on our part we assume, for example, in the following cases:
• ensuring IT security and IT operations,
• Customization of our online offer, including the use of cookies required for the provision of a service requested by you,
• Advertising or market and opinion research, provided that you have not objected to the use of your data and it is not targeted advertising to children, cross-site tracking measures to track your behavior on the Internet or the creation of user profiles,
• soliciting information on the creditworthiness and credit risk of credit bureaus (eg SCHUFA, Creditreform) in connection with the use of chargeable services or the conclusion or execution of fee-based contracts,
• asserting legal claims and defense in legal disputes,
• prevention of crime,
• measures to ensure the (virtual) house right,
• Review and optimization of requirements analysis and direct customer approach procedures.
For your existing right of objection, please refer to IV. Of this declaration.

5. Children / Age Verification

Our online offer is not aimed at people under the age of 16. To avoid the use of our online offer by such persons, we reserve the right to raise the date of birth of the users. The survey is based on Art. 6 para. 1 lit. f DSGVO and serves our predominant interest to exclude the use of our online offer by children.

If an age statement is made, it will only be stored until a decision on the release of the requested service or service can be made after checking the age. Please note that age information can also be processed for other reasons and may then be subject to a longer storage period, please refer to this privacy statement.

6. Storage duration and data deletion

Your data will be processed and stored as long as it is required for the purposes set out in this statement to fulfill our contractual and legal obligations or if you have expressly consented thereto.

A deletion or restriction of the processing of your data is thus carried out regularly as soon as the purpose of the storage has been omitted. In addition to the period of use or the contract, the data will be stored by us for a limited period of time for the following purposes:

• Due to legal obligations, data collected in connection with a treatment must be kept for between 10 and 30 years (see, for example, § 28 (3) RöVO).
• For the fulfillment of labor, commercial and fiscal retention periods, in particular according to the Commercial Code, Tax Code, Money Laundering Act, Working Hours Act, Income Tax Act. This results in periods of storage of 2-10 years in exceptional cases, even up to 30 years.
• Further retention of data may be required in connection with litigation and to secure evidence under statute of limitations. In particular, the two-year warranty period and the regular three-year limitation period must be taken into account, however, in individual cases, limitation periods are up to 30 years.

In the case of the abovementioned deadlines, it must be borne in mind that the date of actual deletion or limitation of processing may be significantly delayed at the beginning of these time limits due to different rules.

Due to the variety of possible constellations for an appeal to corresponding retention obligations and their beginning exact information on storage time and data deletion can only be granted on request in individual cases. In this respect we refer to your under III. of this declaration.

7. Obligation to specify the data

When collecting the data or in the context of this declaration, we expressly point out if it is mandatory data that is required for the use of our services or for the conclusion of a contract, or whose provision is required by law or contract.

If you refuse to collect or provide such compulsory data, you will not be able to retrieve the corresponding services or to conclude the desired contract with us. You will not incur any other disadvantages from not providing the data.

8. Categories of recipients of your data

Within our practice, those entities have access to your data that they need to fulfill our contractual and legal obligations, as well as other data-processing purposes identified in this Privacy Policy or in the collection of data.

In addition, external service providers and vicarious agents employed by us may also receive data for these purposes insofar as they are subject to professional secrecy, protect the confidentiality of your data or adhere to our written data protection directives.

This may involve the use of third-party specialist services in which the service provider we use is independently responsible for the data processing.

Such recipients can be:

professional secret carriers: e.g. Tax consultants, lawyers, accountants and others to whom the transmission of data is necessary to fulfill our contractual or legal obligations, to exercise our legitimate interests in connection with employment, tax and social legislation or in litigation.
clearing offices and collection agencies with transfer of claims.
Banks and payment service providers for money transfer and payment processing.
Postal and parcel services for letter transport and goods delivery.
Such transfer shall be solely on the basis of the legal basis set out in this Privacy Policy (for example, to fulfill contractual or legal obligations or to exercise legitimate interests, which requires us to have the data processing required in this regard be made by appropriate professionals).

In addition, we can commission contract processors to carry out the data processing. These are checked by us before commissioning on their suitability. You are contractually obliged to guarantee compliance with the confidentiality obligations to us and to the observance of the requirements of the DSGVO and the BDSG. The legal basis for the transmission of data to processors is the legal basis for the data processing by us mentioned in this privacy policy.

Such receivers may e.g. his:
data centers including cloud computing;
Internet service providers (Internet and e-mail services);
Application Service Provider (third-party software as a service with outsourced data storage);
accounting service, external financial accounting, payroll;
IT and telecommunications service providers (including maintenance and repair);
Call center;
lettershops;
service provider for data collection, data conversion, scanning and copying of documents;
Service provider for data backup and archiving;
service provider for the disposal of data carriers;
Technical support and user assistance service providers (including remote maintenance);

9. Transfer of data to a third country or to an international organization

Data transfer to countries outside the EU, the EEA or Switzerland (so-called third countries) will only take place if this is required for the execution of your orders or required by law.

In addition, data may be transferred to a third country or to an international organization if you have given us your consent or if the data is transmitted as part of order processing. If service providers are deployed in a third country, they are required to comply with the level of data protection in Europe in addition to written instructions under the EU Standard Contract Clause Agreement or are subject to EU-US regulations. Privacy Shield.

10. External links

Our online offer may contain links to online offers from third parties (external links).

The mere inclusion of these external links in our offer does not result in the third-party provider receiving information about you when you visit our online service.
Only when you access the external links, you will go to websites and offers for which our privacy policy does not apply. Even the mere call of the external link may lead to the processing of data by the third party. For information about the local data protection level, please refer to the declarations of the person responsible there.

Do you want to avoid data processing by the posts located behind the external links, please do not use them. Depending on the device and browser used, the destination URL of a link can usually be viewed, even without following the link (for example, by right-clicking and selecting more detailed information).

II. The data processing in detail

1. Provision of the online offer and creation of logfiles

Type and scope of data processing

When you visit our website, we automatically process data from you. These are the following data:

The browser used for the retrieval and its version
Type and version of the user's operating system
Date and time of access by the user
The Internet protocol address (IP address) of the user and the requesting provider
if necessary the website from which the user came to our online offer (referr-URL)
if necessary, the subpages and functions that the user navigates on our online offer
if applicable, the websites that the user navigates from our online offer
other similar data and information required to provide our online offering and its capabilities, as well as security in the event of attacks on our IT systems

This data is stored in a log file of our system (logfile).

Purpose of data processing
We do not process this data - including its storage and statistical analysis - together with other personal data of the user, but use them exclusively, as far as necessary

to enable a correct delivery of the contents of our online offer to the user,
to optimize the content of our online offer as well as the advertising for it,
to ensure the safety and functionality of our online offering and
to be able to provide the information necessary for defense and legal action in the event of a cyberattack.

Legal basis for data processing
The legal basis for the above processing, temporary storage and statistical analysis of the data is Art. 6 para. 1 lit. f DSGVO. For the purposes set out above, our legitimate interest in data processing also arises.

Duration of storage
Data will generally be deleted within 14 days of the termination of your access to our online offer. The retention period is required for the security concerns identified above (for example, cyber-attack, fraud or abuse cases). A longer storage takes place only if we are legally obliged to do so.

Statistical evaluations aggregated from the data are stored for up to 3 years. These evaluations are anonymous and can no longer be assigned to a natural person.

Of objection; Your rights
For more information about your right to object to the above processing of data and to your other rights in relation to data processing, please refer to III. and IV. of this statement.

2. Use of cookies

Type and scope of data processing
Our online offer uses cookies. These are small text files that your browser or other program that retrieves our online offering (such as Flashplayer) stores on your computer or mobile device.

Such cookies contain characteristic strings that allow the browser to be uniquely identified during the use of our online offer and, if necessary, when our online offer is recalled.

In addition, cookies may contain information that may be required to provide our services or to provide you with a more personalized and convenient experience. Also, information that allows us to analyze your behavior on our online offering can be stored there.

The cookies we use only store the following information:

session data

The above information will not be processed by us together with other data from you. As far as possible, the data are also anonymized, but at least pseudonymized, so that an assignment to the calling user is not possible from these data. This data is not passed on to third parties.

We only use cookies that would allow us or third parties to track your behavior on the Internet - outside of our online offering - or those that serve to create cross-user user profiles, if you have expressly consented to their use or if you only use anonymised data which do not allow an association with the retrieving terminal and your person. You will be separately informed of such use in this statement.

Purpose of data processing
The purpose of using technically necessary cookies is to be able to deliver our online offer to you or make it more user-friendly. Thus, some elements of our online offer require that the retrieving browser can still be identified after a page change, because our offer otherwise can not be used or not meaningful.

To ensure and improve the quality of our online offer and its content, we use analysis cookies. Through statistical analysis of the data thus obtained and pseudonymised, we learn more about how our online offer is used. In addition, these data also serve as security against attacks on our IT systems, abuse or fraud.

Legal basis for data processing
The legal basis for the above processing of data is Art. 6 para. 1 lit. f DSGVO. For the purposes set out above, our legitimate interest in data processing also arises.

Any further processing, especially in the form of cross-site tracking cookies, will only take place if this is referred to separately in this declaration and only on the basis of prior consent obtained from you pursuant to Art. 6 para. 1 lit. a DSGVO.

Duration of storage
Cookies are stored on the computer of the user and transmitted by this on our side. Therefore, as a user, you have full control over the use and retention of cookies.

Temporary cookies are automatically deleted when you leave our online offer and close the browser. Persistent cookies remain stored on your device even after you leave our online service and close the browser and can be read again when you use our online service again.

You can prevent or restrict the temporary or permanent cookies from being stored on your device by making appropriate settings to the program that you use to access our online offer (such as browsers, flashplayers, etc.). By the corresponding deletion function on your browser you can also delete already stored cookies at any time. Please note that in that case not all features of our online offer may be used or any data or logins stored in the cookies must be re-entered when using our online offer again.

Of objection; Your rights
For more information about your rights, the contradiction of the above-mentioned processing of data and your other rights in connection with the processing of your data, see III. and IV. of this Privacy Policy.

3. Contact form and e-mail contact

Type and scope of data processing
On our online offer we provide contact forms, which can be used for electronic contact with us.

If you make this possible, the data entered in the input mask will be transmitted to us and saved.

Which data are these and which of these data are mandatory data for the respective purpose of the contact, please refer to the respective input mask.

When using our contact forms, the following technical access data are also stored:

The IP address of the user
Date and time of dispatch

For the processing of the data in the context of the sending process your consent is obtained and referred to this privacy statement.

In addition, a contact via the provided e-mail addresses is possible. In this case, the data that you sent us by e-mail will be saved. We point out that an unencrypted communication via e-mail is not secure. Nevertheless, if you contact us in an unencrypted way, we see your consent to an unencrypted communication.

As a rule, there is no disclosure of data to third parties in this context. The data is used exclusively for processing the conversation. However, if the conversation is geared toward the initiation or performance of a contract, the transfer of your data to a third party (for example, the company responsible for processing payments or a transport company) can be used to process a payment, a delivery and other contractual or legal purposes.

Purpose of data processing
Your contact, voluntarily providing data, is intended to guide the communication you have initiated for the purpose you have indicated.

Your contact and the data processing carried out by us in this connection may also be required to fulfill a contract with you or to carry out pre-contractual measures initiated at your request.

Legal basis for data processing
The legal basis for the above processing of the data due to your contact via the contact form is your consent in accordance with Art. 6 para. 1 lit. a DSGVO.

The legal basis for the processing of the data transmitted in the course of sending an e-mail is Article 6 (1) lit. f DSGVO, our legitimate interest in data processing arises from the purpose of your contact.

If the establishment of contact serves the fulfillment of a contract of which you are a party or if it is necessary to contact you to carry out pre-contractual measures that are made at your request, then additional legal basis for the processing of the data is Art. 6 (1) lit. b DSGVO.

The technical access data collected on the occasion of your use of the contact form are also used to prevent and investigate attacks on our IT systems, cases of abuse and fraud on the basis of Art. 6 para. 1 lit. f DSGVO processed.

Duration of storage
The data will be deleted as soon as it is no longer necessary for the purpose of its collection.

This is usually the case when the communication purpose associated with your request is done. You can also request the deletion of the data at any time, in which case the conversation may not be continued. A longer storage takes place only if we are legally obliged to do so.

If the data are necessary for the fulfillment of a contract or for the execution of pre-contractual measures, a premature deletion of the data is only possible, as far as contractual or legal obligations do not preclude a deletion. In this context, the storage of changes to the records may be necessary to maintain a corresponding history and thus comply with legal requirements or to prevent or clarify cases of abuse and fraud. Even after the contract has been concluded, there may be a need to store your data in order to comply with contractual or legal obligations.

Revocation and opposition possibility; Your rights
For more information about your right to revoke your consent at any time with future effect or to object to the above processing of data, and to your other rights in relation to data processing, please refer to III. and IV. of this statement.

4. Google Web Fonts

For uniform presentation of fonts on our website, regardless of the browser or device you use, we use so-called web fonts. These are provided by Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA (Google).

If you access our page, your browser loads the required web fonts into your browser cache in order to display texts and fonts correctly. To do this, your browser needs to connect to Google's servers. As a result, Google learns that our website has been accessed via your IP address.

For more information about Google Web Fonts, see (developers.google.com/fonts/faq)

For more information about Google's data collection and how it processes and uses your data and related rights, please refer to Google's Privacy Policy (policies.google.com/privacy/update?hl=en)

The use of Google Web Fonts by us occurs on the basis of Art. 6 para. 1 lit. f DSGVO.

5. Google Maps

In order to make it easier for our customers and visitors to find our headquarters or other places specified by us, we have integrated the Google Maps mapping service on our website.

This map service is provided by Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA (Google).

In order for the map to be displayed, your browser must be able to connect to Google's servers. As a result, Google learns that our website has been accessed via your IP address.

For more information about Google's data collection, see: II./4. Google Web Fonts.

III. Your rights

If we process personal data from you, if you have an affected person i.S.d. DSGVO the following rights towards us, as responsible. To exercise your rights, you can contact us or our data protection officer under the contact details mentioned above.

1. Right to information

You have a right to information under Article 15 DSGVO. The right to information initially includes the question of whether we process personal data from you. If this is the case, you can request detailed information on the data, its processing and your other rights to the extent required by law. Restrictions of your right of access can arise from §§ 27 and 34 of the new Federal Data Protection Act (BDSG).

2. Right to rectification

Should your data processed by us be incorrect or incomplete, you have a right to rectification and / or completion in accordance with Article 16 GDPR. We have to correct it immediately after your request. Limitations of your right of rectification may arise from § 27 BDSG.

3. Right to delete the data or restrict the processing

Under the conditions of Articles 17 and 18 GDPR you may request the immediate deletion of the data concerning you or at least the restriction of the processing of the data. However, restrictions of these rights may result from §§ 27 and 35 BDSG.

4. Right to information

If you can effectively exercise a right of rectification, erasure or restriction of processing to us, we are required to notify all recipients to whom the data have been disclosed of this correction or deletion of the data or restriction of processing, unless it proves this is impossible or involves a disproportionate effort. Upon request, we will inform you about these recipients in such a case.

5. Right to Data Portability

They have a right to data portability under the conditions set out in Article 20 of the GDPR to the extent mentioned therein. This includes in particular the provision of the data by us in a structured, common and machine-readable format for further use by you.

6. Right to revoke the data protection consent declaration

According to Art. 7 (3) DSGVO, § 51 BDSG you have the right to revoke your data protection consent declaration at any time. The revocation of consent does not affect the legality of the processing carried out on the basis of the consent until the revocation.

7. Automated decision on an individual basis including profiling

You have the right, under the conditions of Art. 22 GDPR, not to be subject to a decision based solely on automated processing - including profiling - which will have legal effects on you or similarly affect you in a similar manner.

Such procedures are not used by us.

8. Right to complain to a supervisory authority

Without prejudice to any other administrative or judicial remedy, you shall have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your place of residence, employment or the place of the alleged infringement, if you consider that the processing of the data concerning you is contrary to the DSGVO ,

The supervisory authority to which the complaint has been submitted will inform you of the status and results of the complaint, including the possibility of a judicial remedy pursuant to Art. 78 DSGVO.

IV. Your right to object

Case-specific right of objection

For reasons that arise from your particular situation, you have the right at any time against the processing of data relating to you which, on the basis of Art. 6 para. 1 lit. e DSGVO (data processing in the public interest) or Art. 6 para. 1 lit. f DSGVO (data processing on the basis of a balance of interests) takes place, objecting; this also applies to profiling based on these provisions.

We will then no longer process the data concerning you unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing is for the purpose of asserting, exercising or defending legal claims.

Right to object to direct mail

If we process the data relating to you in order to operate direct mail, you have the right to object at any time, even without cause, to the processing of your data for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct mail.

If you object to processing for direct marketing purposes, your data will no longer be processed for these purposes.

Scientific, historical or statistical purposes
For reasons that arise from your particular situation, you also have the right to process your data for scientific or historical research purposes or for statistical purposes. Art. 89 para. 1 DSGVO is to be contradicted.

However, their right of objection may be limited insofar as it is likely to render impossible or seriously impair the realization of the research or statistical purposes and the restriction is necessary for the fulfillment of the research or statistical purposes. For further information please refer to § 27 BDSG.

Exercise in information society services

Regardless of Directive 2002/58 /EG, you have the option, in the context of the use of information society services, of exercising your right to opt-out by using automated procedures that use technical specifications.

You can also submit a contradiction to us under the contact details above.

Privacy policy Ursula Klein · Food & Body

Contents

I. General information about data processing

II. The data processing in detail

III. Your rights

IV. Your right to object